CVE-2020-4967 - IBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through HTTP headers which could be used in further attacks against the system

Back Back to CVE browser

MEDIUM

IBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through HTTP headers which could be used in further attacks against the system

Published Jan 27, 2021

4.3

MEDIUM

CVSS 3.1

EPSS 0.74%

Description

IBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through HTTP headers which could be used in further attacks against the system. IBM X-Force ID: 192425.

Affected products

Vendor IBM Product Cloud Pak for Security Default
n/a
- Version
  1.3.0.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Cloud Pak for Security

n/a

Version	Status	Constraints
1.3.0.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26214
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/192425
vdb-entryx_refsource_XFMailing ListVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6408662
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26214		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/192425		vdb-entryx_refsource_XFMailing ListVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6408662		x_refsource_CONFIRMPatchVendor Advisory